furyhawk/openclaw
1
0
Fork 0
mirror of https://github.com/openclaw/openclaw.git synced 2026-07-21 10:16:44 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(deps): update axios past proxy advisory (#111984)

Browse Source
This commit is contained in:
Dallin Romney
2026-07-21 09:21:14 +09:00
committed by GitHub
parent ff98dd93f5
commit cde2e71d43
7 changed files with 140 additions and 32 deletions
Download Patch File Download Diff File Expand all files Collapse all files
extensions/feishu/npm-shrinkwrap.json
Generated
+29 -3
View File
@@ -141,6 +141,18 @@
"integrity": "sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==",
"license": "MIT"
},
"node_modules/agent-base": {
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
"integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
"license": "MIT",
"dependencies": {
"debug": "4"
},
"engines": {
"node": ">= 6.0.0"
}
},
"node_modules/asynckit": {
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -148,13 +160,14 @@
"license": "MIT"
},
"node_modules/axios": {
"version": "1.16.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
"integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
"version": "1.18.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.18.0.tgz",
"integrity": "sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==",
"license": "MIT",
"dependencies": {
"follow-redirects": "^1.16.0",
"form-data": "^4.0.5",
"https-proxy-agent": "^5.0.1",
"proxy-from-env": "^2.1.0"
}
},
@@ -463,6 +476,19 @@
"node": ">= 0.4"
}
},
"node_modules/https-proxy-agent": {
"version": "5.0.1",
"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
"integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
"license": "MIT",
"dependencies": {
"agent-base": "6",
"debug": "4"
},
"engines": {
"node": ">= 6"
}
},
"node_modules/lodash.identity": {
"version": "3.0.0",
"resolved": "https://registry.npmjs.org/lodash.identity/-/lodash.identity-3.0.0.tgz",
extensions/msteams/npm-shrinkwrap.json
Generated
+29 -3
View File
@@ -318,16 +318,42 @@
"license": "MIT"
},
"node_modules/axios": {
"version": "1.16.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
"integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
"version": "1.18.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.18.0.tgz",
"integrity": "sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==",
"license": "MIT",
"dependencies": {
"follow-redirects": "^1.16.0",
"form-data": "^4.0.5",
"https-proxy-agent": "^5.0.1",
"proxy-from-env": "^2.1.0"
}
},
"node_modules/axios/node_modules/agent-base": {
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
"integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
"license": "MIT",
"dependencies": {
"debug": "4"
},
"engines": {
"node": ">= 6.0.0"
}
},
"node_modules/axios/node_modules/https-proxy-agent": {
"version": "5.0.1",
"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
"integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
"license": "MIT",
"dependencies": {
"agent-base": "6",
"debug": "4"
},
"engines": {
"node": ">= 6"
}
},
"node_modules/body-parser": {
"version": "2.3.0",
"resolved": "https://registry.npmjs.org/body-parser/-/body-parser-2.3.0.tgz",
extensions/slack/npm-shrinkwrap.json
Generated
+29 -3
View File
@@ -185,6 +185,18 @@
"node": ">= 0.6"
}
},
"node_modules/agent-base": {
"version": "6.0.2",
"resolved": "https://registry.npmjs.org/agent-base/-/agent-base-6.0.2.tgz",
"integrity": "sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==",
"license": "MIT",
"dependencies": {
"debug": "4"
},
"engines": {
"node": ">= 6.0.0"
}
},
"node_modules/asynckit": {
"version": "0.4.0",
"resolved": "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz",
@@ -192,13 +204,14 @@
"license": "MIT"
},
"node_modules/axios": {
"version": "1.16.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.16.0.tgz",
"integrity": "sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==",
"version": "1.18.0",
"resolved": "https://registry.npmjs.org/axios/-/axios-1.18.0.tgz",
"integrity": "sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==",
"license": "MIT",
"dependencies": {
"follow-redirects": "^1.16.0",
"form-data": "^4.0.5",
"https-proxy-agent": "^5.0.1",
"proxy-from-env": "^2.1.0"
}
},
@@ -731,6 +744,19 @@
"url": "https://opencollective.com/express"
}
},
"node_modules/https-proxy-agent": {
"version": "5.0.1",
"resolved": "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-5.0.1.tgz",
"integrity": "sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==",
"license": "MIT",
"dependencies": {
"agent-base": "6",
"debug": "4"
},
"engines": {
"node": ">= 6"
}
},
"node_modules/iconv-lite": {
"version": "0.7.2",
"resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
pnpm-lock.yaml
Generated
+39 -9
View File
@@ -12,7 +12,7 @@ overrides:
'@aws-sdk/xml-builder': 3.972.33
hono: 4.12.25
'@hono/node-server': 1.19.14
axios: 1.16.0
axios: 1.18.0
fast-uri: 3.1.2
follow-redirects: 1.16.0
defu: 6.1.5
@@ -5031,6 +5031,10 @@ packages:
engines: {node: '>=22.13.0'}
hasBin: true
agent-base@6.0.2:
resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
engines: {node: '>= 6.0.0'}
agent-base@7.1.4:
resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
engines: {node: '>= 14'}
@@ -5136,8 +5140,8 @@ packages:
resolution: {integrity: sha512-dK9Z/P83C/rBfTrXXgPD3jZ+aXxx2o/P4rq8+H1JqxbXklitEeJw4CrcwMC5CkON3CX3yy2gaWnIEVYejYh0zQ==}
engines: {node: '>=14'}
axios@1.16.0:
resolution: {integrity: sha512-6hp5CwvTPlN2A31g5dxnwAX0orzM7pmCRDLnZSX772mv8WDqICwFjowHuPs04Mc8deIld1+ejhtaMn5vp6b+1w==}
axios@1.18.0:
resolution: {integrity: sha512-E32NzpYKp++W7XRe52rHiXV2ehxmh3wbdgO7MHeFM+vqxLBYHzt0ElkiImtOBxtOmyp0yoC8C6uESVV84Y2/hw==}
b4a@1.8.1:
resolution: {integrity: sha512-aiqre1Nr0B/6DgE2N5vwTc+2/oQZ4Wh1t4NznYY4E00y8LCt6NqdRv81so00oo27D8MVKTpUa/MwUUtBLXCoDw==}
@@ -6060,6 +6064,10 @@ packages:
resolution: {integrity: sha512-JrF8SSLVmcvc5NducxgyOrKXe3EsyHMgBFgSaIUGmArKe+rwr0uphRkRXvwiom3I+fpIfoItveHrfudL8/rxuA==}
engines: {node: '>=16'}
https-proxy-agent@5.0.1:
resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
engines: {node: '>= 6'}
https-proxy-agent@7.0.6:
resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
engines: {node: '>= 14'}
@@ -9622,7 +9630,7 @@ snapshots:
'@larksuiteoapi/node-sdk@1.68.0':
dependencies:
axios: 1.16.0
axios: 1.18.0
lodash.identity: 3.0.0
lodash.merge: 4.6.2
lodash.pickby: 4.6.0
@@ -9632,6 +9640,7 @@ snapshots:
transitivePeerDependencies:
- bufferutil
- debug
- supports-color
- utf-8-validate
'@lezer/common@1.5.2': {}
@@ -9852,6 +9861,7 @@ snapshots:
qs: 6.15.2
transitivePeerDependencies:
- debug
- supports-color
'@microsoft/teams.apps@2.0.13':
dependencies:
@@ -9859,7 +9869,7 @@ snapshots:
'@microsoft/teams.api': 2.0.13
'@microsoft/teams.common': 2.0.13
'@microsoft/teams.graph': 2.0.13
axios: 1.16.0
axios: 1.18.0
cors: 2.8.6
express: 5.2.1
jsonwebtoken: 9.0.3
@@ -9873,9 +9883,10 @@ snapshots:
'@microsoft/teams.common@2.0.13':
dependencies:
axios: 1.16.0
axios: 1.18.0
transitivePeerDependencies:
- debug
- supports-color
'@microsoft/teams.graph@2.0.13':
dependencies:
@@ -9883,6 +9894,7 @@ snapshots:
qs: 6.15.2
transitivePeerDependencies:
- debug
- supports-color
'@mistralai/mistralai@2.4.0(@opentelemetry/api@1.9.1)':
dependencies:
@@ -10719,7 +10731,7 @@ snapshots:
'@slack/types': 2.21.1
'@slack/web-api': 7.18.0
'@types/express': 5.0.6
axios: 1.16.0
axios: 1.18.0
express: 5.2.1
path-to-regexp: 8.4.0
raw-body: 3.0.2
@@ -10743,6 +10755,7 @@ snapshots:
jsonwebtoken: 9.0.3
transitivePeerDependencies:
- debug
- supports-color
'@slack/socket-mode@2.0.7':
dependencies:
@@ -10755,6 +10768,7 @@ snapshots:
transitivePeerDependencies:
- bufferutil
- debug
- supports-color
- utf-8-validate
'@slack/types@2.21.1': {}
@@ -10765,7 +10779,7 @@ snapshots:
'@slack/types': 2.21.1
'@types/node': 26.1.0
'@types/retry': 0.12.0
axios: 1.16.0
axios: 1.18.0
eventemitter3: 5.0.4
form-data: 2.5.6
is-electron: 2.2.2
@@ -10775,6 +10789,7 @@ snapshots:
retry: 0.13.1
transitivePeerDependencies:
- debug
- supports-color
'@smithy/config-resolver@4.6.5':
dependencies:
@@ -11377,6 +11392,12 @@ snapshots:
- bare-buffer
- react-native-b4a
agent-base@6.0.2:
dependencies:
debug: 4.4.3
transitivePeerDependencies:
- supports-color
agent-base@7.1.4: {}
ajv-formats@3.0.1(ajv@8.20.0):
@@ -11482,13 +11503,15 @@ snapshots:
audio-type@2.4.1: {}
axios@1.16.0:
axios@1.18.0:
dependencies:
follow-redirects: 1.16.0
form-data: 2.5.6
https-proxy-agent: 5.0.1
proxy-from-env: 2.1.0
transitivePeerDependencies:
- debug
- supports-color
b4a@1.8.1: {}
@@ -12496,6 +12519,13 @@ snapshots:
http_ece@1.2.0: {}
https-proxy-agent@5.0.1:
dependencies:
agent-base: 6.0.2
debug: 4.4.3
transitivePeerDependencies:
- supports-color
https-proxy-agent@7.0.6:
dependencies:
agent-base: 7.1.4
pnpm-workspace.yaml
+1 -1
View File
@@ -104,7 +104,7 @@ overrides:
"@aws-sdk/xml-builder": 3.972.33
hono: 4.12.25
"@hono/node-server": 1.19.14
axios: 1.16.0
axios: 1.18.0
fast-uri: 3.1.2
follow-redirects: 1.16.0
defu: 6.1.5
src/infra/npm-managed-root.test.ts
+11 -11
View File
@@ -230,7 +230,7 @@ describe("managed npm root", () => {
packageName: "@openclaw/feishu",
dependencySpec: "2026.5.4",
managedOverrides: {
axios: "1.16.0",
axios: "1.18.0",
"node-domexception": "npm:@nolyfill/domexception@1.0.28",
nested: {
semver: "1.2.3",
@@ -249,7 +249,7 @@ describe("managed npm root", () => {
},
overrides: {
"left-pad": "1.3.0",
axios: "1.16.0",
axios: "1.18.0",
"node-domexception": "npm:@nolyfill/domexception@1.0.28",
nested: {
alias: "npm:@scope/alias@1.0.0",
@@ -271,7 +271,7 @@ describe("managed npm root", () => {
dependencySpec: "2026.5.4",
omitUnsupportedManagedOverrides: true,
managedOverrides: {
axios: "1.16.0",
axios: "1.18.0",
"node-domexception": "npm:@nolyfill/domexception@1.0.28",
nested: {
alias: "npm:@scope/alias@1.0.0",
@@ -284,7 +284,7 @@ describe("managed npm root", () => {
fs.readFile(path.join(npmRoot, "package.json"), "utf8").then((raw) => JSON.parse(raw)),
).resolves.toMatchObject({
overrides: {
axios: "1.16.0",
axios: "1.18.0",
nested: {
semver: "1.2.3",
},
@@ -351,7 +351,7 @@ describe("managed npm root", () => {
dependencySpec: "2.0.0",
managedOverrides: {
"pinned-package": "1.0.0",
axios: "1.16.0",
axios: "1.18.0",
},
});
@@ -363,7 +363,7 @@ describe("managed npm root", () => {
"pinned-package": "2.0.0",
},
overrides: {
axios: "1.16.0",
axios: "1.18.0",
},
openclaw: {
managedOverrides: ["axios"],
@@ -537,7 +537,7 @@ describe("managed npm root", () => {
const expectedOverrides = workspace.overrides ?? {};
expect(expectedOverrides).toMatchObject({
axios: "1.16.0",
axios: "1.18.0",
"node-domexception": "npm:@nolyfill/domexception@1.0.28",
});
await expect(readOpenClawManagedNpmRootOverrides()).resolves.toEqual(expectedOverrides);
@@ -558,7 +558,7 @@ describe("managed npm root", () => {
);
await fs.writeFile(
path.join(packageRoot, "pnpm-workspace.yaml"),
"overrides:\n axios: 1.16.0\n",
"overrides:\n axios: 1.18.0\n",
);
await expect(
@@ -567,7 +567,7 @@ describe("managed npm root", () => {
cwd: path.join(packageRoot, "dist"),
}),
).resolves.toEqual({
axios: "1.16.0",
axios: "1.18.0",
});
});
@@ -598,7 +598,7 @@ describe("managed npm root", () => {
" nested:",
' optional-runtime: "$optional-runtime"',
' alias: "$node-domexception"',
" axios: 1.16.0",
" axios: 1.18.0",
' node-domexception: "$node-domexception"',
"",
].join("\n"),
@@ -610,7 +610,7 @@ describe("managed npm root", () => {
"optional-runtime": "2.0.0",
alias: "npm:@nolyfill/domexception@1.0.28",
},
axios: "1.16.0",
axios: "1.18.0",
"node-domexception": "npm:@nolyfill/domexception@1.0.28",
});
});
src/plugins/install.npm-spec.test.ts
+2 -2
View File
@@ -2945,7 +2945,7 @@ describe("installPluginFromNpmSpec", () => {
path.join(hostRoot, "pnpm-workspace.yaml"),
[
"overrides:",
" axios: 1.16.0",
" axios: 1.18.0",
' node-domexception: "npm:@nolyfill/domexception@1.0.28"',
" nested:",
' alias: "npm:@scope/alias@1.0.0"',
@@ -2994,7 +2994,7 @@ describe("installPluginFromNpmSpec", () => {
};
}
expect(manifest.overrides).toEqual({
axios: "1.16.0",
axios: "1.18.0",
nested: {
semver: "1.2.3",
},